Germany – IT services: consulting, software development, Internet and support – Attack Surface Management Dienstleistungen (ASM)

The subject of the contract is a service in the field of "Monitoring the external perimeter of EnBW". The external perimeter of EnBW includes, in addition to the EnBW AG systems accessible from the Internet, all systems accessible from the Internet of majority-owned subsidiaries of EnBW AG, as well as registered domains and registered IP address ranges. As part of the service, these systems must be fully monitored. The AN must continuously perform manual attack simulations against the AG's systems that are accessible from the Internet. Furthermore, in the event of new relevant vulnerabilities being discovered, the AN must check the previously described scope for impact and manually validate the corresponding results. The validated reports must be sent to the AG via a communication channel to be agreed between the AN and the AG. The AN must also check the darknet for access data to EnBW systems and EnBW accounts and, if any information is found, report this via the agreed communication channel. The specific services that the AN must provide are described in Annex_1.2_Attack_Surface_Management_Service_Description. The present call for tender aims to conclude a contract for the performance of services within the framework of an Attack Surface Management Service, starting from 01.12.2026 until presumably 30.11.2029.